Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier: WbuWqBi3s5GdN7bKGRG7jNF68B/CuP9b9ga1kVJOuOI=
Subject key identifier: ED:5F:86:AA:B2:66:30:76:63:3B:EE:91:21:8B:11:0D:17:C9:A1:75
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial: 019511D99848CB7D1C6B1ABF7ADDE1ADF13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number: 0503
Signing time: Mon 17 Feb 2025 03:00:27 +0000
Manifest this update: Mon 17 Feb 2025 03:00:27 +0000
Manifest next update: Tue 18 Feb 2025 03:00:27 +0000
Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: aLyxUNe1xnLaYxZ4h7pjCblRwZit7Vx4rjF0MvbSMIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:98:48:cb:7d:1c:6b:1a:bf:7a:dd:e1:ad:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Validity
Not Before: Feb 17 03:00:27 2025 GMT
Not After : Feb 18 03:00:27 2025 GMT
Subject: CN=ed5f86aab2663076633bee91218b110d17c9a175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:17:33:27:35:f2:49:08:75:25:71:62:d8:
11:bc:66:d2:7c:2a:a3:0c:e0:17:c1:ec:62:51:4a:
7b:05:ca:b9:07:26:eb:a0:30:c1:67:89:30:45:4c:
7d:f9:8c:07:fa:00:2e:b8:42:a7:ac:96:a0:02:40:
09:7f:12:c6:c3:4d:f5:df:35:36:80:7a:94:24:d7:
2e:3f:0a:71:7f:40:80:e9:b1:87:28:12:bf:79:73:
b0:4a:e5:ac:6a:e9:2a:5d:8e:b8:f9:e2:de:82:f4:
d6:b9:f8:a3:34:4c:a1:0c:64:14:93:ae:32:49:99:
90:39:09:7b:e0:a1:f6:6a:f4:bb:8a:2f:13:ea:b8:
fd:a9:f3:33:59:d9:8b:c8:5c:af:dd:52:3f:28:40:
d2:de:71:1f:bc:b5:75:aa:df:0e:ca:6a:e8:49:90:
90:26:f8:0c:ad:21:d3:23:eb:b9:5b:c9:10:16:8e:
6f:eb:86:60:47:0a:f1:26:79:06:36:4b:02:62:18:
1a:f2:ee:f4:c7:19:29:9c:81:c2:06:96:c9:37:25:
6e:a4:c0:7c:7b:9e:a4:fb:64:ef:36:6e:06:25:c0:
ad:42:19:64:5b:d3:a9:54:5a:96:74:14:e3:b1:4c:
01:c9:04:a4:d7:04:a2:8c:7a:67:c4:10:17:3c:8f:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5F:86:AA:B2:66:30:76:63:3B:EE:91:21:8B:11:0D:17:C9:A1:75
X509v3 Authority Key Identifier:
keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:60:7b:8e:88:a3:d2:82:16:01:f4:21:2d:e6:28:32:9d:61:
4e:a4:08:b7:41:5d:dc:68:8e:c8:78:20:7a:87:9c:8a:6b:0d:
fd:53:7f:9f:08:58:21:80:c4:d3:27:7f:e5:8b:cc:81:3d:d4:
33:65:9c:9e:50:ba:32:75:2c:6f:05:5e:b7:55:73:81:f3:ca:
c9:a1:1f:dc:4f:ed:f8:5e:5c:23:67:8c:fe:74:c3:6c:93:14:
17:03:64:76:bc:7b:e4:47:4c:37:7e:eb:59:e8:43:d9:37:16:
f0:f0:f4:35:f9:18:4c:ee:98:51:6b:5e:81:68:75:2d:47:74:
ad:02:8c:9a:58:fc:77:ba:8c:3c:af:cc:a6:32:6c:2b:bf:af:
9f:b0:a0:41:76:1d:03:25:41:6a:b9:87:40:57:d5:dd:20:c1:
88:cd:79:44:ec:76:c8:81:79:14:c2:10:d8:9a:21:ef:d3:7a:
96:07:d5:3b:0f:2e:64:ad:b3:29:aa:c4:b5:de:81:48:12:60:
d7:04:d3:b5:2b:34:a2:6a:0a:5e:ac:3a:67:e1:3d:bd:67:27:
eb:b2:94:c3:4e:6a:a8:af:04:65:21:32:84:f1:ad:fa:f2:f7:
56:c4:1d:86:14:ed:fd:11:2a:84:92:75:66:a1:08:c6:fb:9f:
63:00:a9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2ZhIy30caxq/et3hrfE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlN2EyMGI0ODY4MjFkNjI3YmQzNjA5NWU3YTA1YWY5ZmFh
MTUyOWMwHhcNMjUwMjE3MDMwMDI3WhcNMjUwMjE4MDMwMDI3WjAzMTEwLwYDVQQD
EyhlZDVmODZhYWIyNjYzMDc2NjMzYmVlOTEyMThiMTEwZDE3YzlhMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmywXMyc18kkIdSVxYtgRvGbSfCqj
DOAXwexiUUp7Bcq5BybroDDBZ4kwRUx9+YwH+gAuuEKnrJagAkAJfxLGw0313zU2
gHqUJNcuPwpxf0CA6bGHKBK/eXOwSuWsaukqXY64+eLegvTWufijNEyhDGQUk64y
SZmQOQl74KH2avS7ii8T6rj9qfMzWdmLyFyv3VI/KEDS3nEfvLV1qt8OymroSZCQ
JvgMrSHTI+u5W8kQFo5v64ZgRwrxJnkGNksCYhga8u70xxkpnIHCBpbJNyVupMB8
e56k+2TvNm4GJcCtQhlkW9OpVFqWdBTjsUwByQSk1wSijHpnxBAXPI/evwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1fhqqyZjB2YzvukSGLEQ0XyaF1MB8GA1UdIwQY
MBaAFH56ILSGgh1ie9NgleegWvn6oVKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUt
YmE3NWY0NzVmYzNlLzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUtYmE3NWY0NzVmYzNl
LzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGB7joij
0oIWAfQhLeYoMp1hTqQIt0Fd3GiOyHggeoecimsN/VN/nwhYIYDE0yd/5YvMgT3U
M2WcnlC6MnUsbwVet1VzgfPKyaEf3E/t+F5cI2eM/nTDbJMUFwNkdrx75EdMN37r
WehD2TcW8PD0NfkYTO6YUWtegWh1LUd0rQKMmlj8d7qMPK/MpjJsK7+vn7CgQXYd
AyVBarmHQFfV3SDBiM15ROx2yIF5FMIQ2Joh79N6lgfVOw8uZK2zKarEtd6BSBJg
1wTTtSs0omoKXqw6Z+E9vWcn67KUw05qqK8EZSEyhPGt+vL3VsQdhhTt/REqhJJ1
ZqEIxvufYwCp4g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:50 2025 by rpki-client